Software which includes anti-spyware, anti-rootkit, anti-phishing, and other technologies that attempt to identify and/or block malicious programs.

learn more… | top users | synonyms

0
votes
1answer
34 views

What is the difference between YARA and CLAMAV?

Can any one explain the difference between YARA and ClamAV ? Are they just two different ways of writing AV or Malware signatures ?
6
votes
3answers
916 views

Possible to detect packed executable?

A packer is a way of obfuscating an executable program, i.e., transforming so the result is still executable and has the same effect when run, but looks different (so it won't be detected by static ...
-2
votes
1answer
48 views

Old e-mail text types itself back into PC later by itself? [closed]

Occasionally, I'll notice my Win7 PC is typing in text by itself. When I open Notepad leave it, the text being typed in is a snippet of text from an e-mail that I wrote and sent months ago to a friend ...
-1
votes
2answers
60 views

Open Source Malware Scanner/Cleaner [closed]

What is the best Open Source Malware Scanner/Cleaner? Malware-bites is good but it requires licensing for companies.
0
votes
2answers
194 views

Virus/Malware: Force Java Download

I have two separate pieces of security software that run regularly - Webroot and Microsoft Security Essentials, and even though neither of these have detected anything is wrong with my computer, every ...
0
votes
1answer
150 views

Find and kill process that create malicious connections

State Recv-Q Send-Q Local Address:Port Peer Address:Port FIN-WAIT-1 0 3640 my.public.ip.xx:https xxx.xx.xxx.xx:56206 SYN-SENT 0 1 ...
1
vote
1answer
112 views

Efficacy of self-made ransomware protection

I was recently wondering about how to circumvent malware such as the infamous Cryptolocker a while back and was wondering about the efficacy of having a set of files with known content in a known ...
2
votes
1answer
42 views

When does it make sense to whitelist some subdomains but not others for a given domain?

Little Snitch has been useful to get a better handle on all the connections my computer tries to make. It's main dialog to allow or deny connections allows customizing (e.g. require specific port, or ...
40
votes
8answers
7k views

Can we trust antivirus software?

There are a lot of free antivirus software and free versions of commercial anti-malwares. Can we really trust these free antivirus programs? The same question about commercial antivirus software. ...
3
votes
1answer
474 views

Enterprise Anti-virus for Linux?

I know this question is probably at risk of offending the guidelines but our IaaS provider was unable to offer us an anti-virus solution for our Linux servers. We are deployed in an enterprise cloud ...
5
votes
3answers
4k views

Javascript Malware: How does it work, and how can it be mitigated?

I am wondering how malware gets served through Javascript. I've noticed a few illegitimate pop-ups while visiting some financial websites. I wonder how malware exploits work against the application ...
16
votes
8answers
1k views

Are signature based antivirus or antimalware effective?

Are signature based antivirus or antimalware solutions effective? Has the battle been lost against the ever increasing amount of malware, particularly rootkits, that are in the wild?
0
votes
1answer
56 views

Google safe browsing vs traditional anti-malware scanners

What is the difference between using Google Safe Browsing and using other traditional anti-webmalware tools ? Which one is more efficient to protect against malicious web content ?
11
votes
8answers
1k views

Are antiviruses still useful? [duplicate]

Are anti-viruses useful nowadays ? Given the number of viruses that are developed and spread monthly, and given the fact anti-viruses are based on virus signatures, I wonder how much it is useful and ...
0
votes
1answer
50 views

Questions about common exploits

I'm investigating the state of my MacBook Pro which I know was compromised, and do not know if I removed the exploits completely (and I realize, technically will never know this). I'm trying to hone ...
0
votes
1answer
58 views

malicious website blocked - on a legit program?

I'm fairly okay with PCs but when it comes to networking i'm quite lost with the details. My brother started up Mount and blade war band napleonic wars - an official game and played multi player and ...
1
vote
0answers
84 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
0
votes
1answer
121 views

How safe is virtual box without internet [duplicate]

I am running a windows 7 virtual box without internet connected. Internet is, however, connected to the host, and I allow any internet access to and from the host. On the guest platform I am working ...
1
vote
1answer
81 views

Detecting code source variants of the same function [closed]

Suppose I have this JavaScript malicious function f1() : <SCRIPT type="text/javascript"> function f1(){ a=1; b=2; c=a+b; } </SCRIPT> This function is embedded within a larger ...
5
votes
2answers
426 views

Signature-based antiviruses

Do signature-based antiviruses search for the exact matches of the signatures they have in their database with those of viruses to analyse ? I ask this question because I wonder if it is the reason ...
6
votes
5answers
6k views

Why Adobe is recommending McAfee security scan during flash player installation?

Why is Adobe recommending a McAfee security scan during the installation of flash player?
1
vote
1answer
114 views

Malware infected ATMs in China via specialized device

Hackers inserted a specialized device which was connected to the notebook into the card reader slot on the ATM and installed malicious software. 100 thousand US dollars were stolen from at least seven ...
3
votes
2answers
130 views

Can full disk encryption make malware recovery more difficult?

Let us say that we have a computer with a fully encrypted disk. If it gets infected with malware, does this make it more difficult to use a LiveCD or other rescue option to clean it or restore it? It ...
0
votes
3answers
2k views

How to detect the so-called “undetectable” Gameover Zeus?

The media are currently (and have been) creating a huge ruckus surrounding the supposedly "undetectable" Gameover Zeus malware. The Daily Mail The Mirror The Independant PC World The Telegraph ...
9
votes
2answers
3k views

Detecting reflective DLL injection

In the past few years, malware (and some pen-test tools like Metasploit's meterpreter payload) have begun to use reflective DLL injection (PDF) to load a DLL into the memory of a process. The benefit ...
-4
votes
6answers
7k views

Will antivirus detect all keyloggers?

Our company schedules Security Training courses for our personnel. In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
21
votes
6answers
18k views

How to scan a PDF for malware?

Can anyone suggest an automated tool to scan a PDF file to determine whether it might contain malware or other "bad stuff"? Or, alternatively, assigns a risk level to the PDF? I would prefer a free ...
4
votes
2answers
544 views

How can NSA implants and backdoors be detected? [closed]

It has been a while now since the Snowden revelations of various NSA malware and backdoors. For instance: March 12, 2014: NSA has developed implants to take over targeted computers’ microphones ...
4
votes
4answers
914 views

To what extent is FREE 3rd party antivirus software better than Windows 8 defender (if any)?

As someone who is not in a position to currently purchase an antivirus suite, I would like to know if having a free Avira or Avast or similar program is worth the overall system performance drop (I ...
0
votes
1answer
62 views

Using multiple AV's

As my computer is currently set up, I have 3 AV's: AVG (paid), Malwarebytes, and Spybot S&D. I think that each one of these serves a purpose: AVG gets your real malware - Trojans, Worms, etc. and ...
0
votes
1answer
3k views

How would I know if my Apple Mac has a virus, and what can I do if I have? [closed]

I have used PCs for most of my life, and I am very aware of the fact that they can catch a variety of viruses. I have owned a MAC now for two years, and have enjoyed a pleasant (perhaps too pleasant) ...
32
votes
8answers
7k views

Are two anti-virus better than one in protecting your computer?

A century old adage: The more the merrier. In general, does this adage hold true in regards to the number of anti-virus software you should have on your PC? Are there any limits before it actually ...
0
votes
2answers
136 views

Why does host's antivirus detect guest's malware?

I'm analyzing some malicious files on a VM and I'm noticing that every time I open a file, the host's antivirus detects it. Why does this happen? Is the malicious content escaping to the host?
2
votes
2answers
265 views

What is the current best practice to secure an executive's laptop?

What is the current best practice to secure an executive's laptop? The exec will be processing highly sensitive documents (high-value bids, merger & acquisition info, technical specs). As such ...
11
votes
4answers
1k views

How effective are anti-virus products against real-world threats?

In a recent interview† with Dave Kennedy, he in passing pegged the average effectiveness of anti-virus products as detecting approximately 3% to 5% of current active threats. While AV comparisons ...
1
vote
2answers
432 views

Can I get a malware on Windows without administrative rights?

I'm a Linux user and I installed Windows recently, I need it for some software. I don't want to use any anti-malware programs, I don't plan on giving administrative rights to applications I don't ...
2
votes
1answer
311 views

My home PC was hacked and accessed my bank! Advice on next steps? [duplicate]

I recently setup a new Win8.1 PC while still working on my main development PC so it did not have all of the security tools that I usually install, e.g. malwarebytes, adaware, etc. Since it takes me a ...
1
vote
1answer
327 views

Can signature-based Antivirus detect encrypted malware? [duplicate]

How effective signature-based Antivirus is, in detecting encrypted malware?
1
vote
3answers
205 views

What is the safest way to copy a file from an untrusted system?

Scenario: There are two computers running GNU/Linux, U and T. U is untrusted and T is trusted. A non-executable file F (which may however have been infected with malware) resides on U. (For ...
-1
votes
1answer
191 views

Whats the difference between Anti-malware and antispyware?

Whats the difference between Anti-malware and antispyware ?
0
votes
2answers
166 views

What security products are necessary or advised for a home computer running Windows?

There is a lot of security related products for home users and it is becoming unclear what the difference is between them. What is the difference between antimalware, antispyware, antiadware and ...
0
votes
2answers
75 views

Is there a down side to how so many security products bundle multiple components into one these days?

For example it seems like anti-virus, anti-spam and firewalls have sort of merged into one product. Is there a downside to this? I don't know of any software firewalls that can be purchased without an ...
3
votes
3answers
2k views

Cryptolocker: can servers be protected?

I'm IT in a small company. The network is about as ancient as most of the staff (at 30, I'm the company's youngest), and the staff also is notorious for spreading viruses around the network despite ...
0
votes
1answer
157 views

someone claims to have created such a malware, can he be true?

These are not my lines they are by someone else on the internet. I also want to know is that malware that unique? How will it work in GPU and is there a way to sandbox such application? "HERE GOES ...
4
votes
1answer
299 views

What is behaviourism and heuristic control in anti-virus software and how does it work?

In one local magazine I read interview with Adrian Porcescu, who is a technical consultant that works for Kaspersky Lab. Among other things, he says their anti-virus uses behaviourism and heuristic ...
5
votes
3answers
1k views

vt-d Virtualisation and Trusted Execution Technology

Being a long time VirtualBox user and having recently purchased a new laptop equipped with an intel i7 720QM I discovered that it supported vt-d. In the meantime I've found out that vt-d comes with ...
20
votes
2answers
2k views

How would one know if they have a rootkit?

Are they impossible to detect? Seeing as the attacker has admin rights and could modify anti virus software that might otherwise be used to detect or circumvent a root kit. Are there certain red flags ...
1
vote
0answers
117 views

How dangerous is Exploit.LNK.BadLnk.a (v)?

I have encountered a supposed low level eploit on my network at work, by the name of: Exploit.LNK.BadLnk.a (v). I have torn through pages of entries on google trying to find information on this bit of ...
0
votes
2answers
439 views

How to defeat software keyloggers [duplicate]

Is it possible to defeat software keyloggers? I remember reading long ago about programs run from a USB which will defeat keyloggers. The software works (if I remember correctly) by intercepting ...
1
vote
1answer
275 views

EMET and AntiVirus

I've just heard about and started playing with EMET and I am curious, do any AV or security suite applications do what EMET does or is EMET something entirely different?